avorelo 0.3.8 → 0.4.0-rc.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (394) hide show
  1. package/LICENSE +16 -23
  2. package/README.md +62 -72
  3. package/bin/avorelo +9 -0
  4. package/package.json +147 -139
  5. package/scripts/README.md +40 -0
  6. package/scripts/avorelo-session-collision-guard.js +540 -0
  7. package/scripts/avorelo-workstream-preflight.js +918 -0
  8. package/scripts/cco-dashboard.js +346 -0
  9. package/scripts/cco-posttooluse.js +504 -0
  10. package/scripts/cco-pretooluse.js +381 -0
  11. package/scripts/cco-status.js +540 -0
  12. package/scripts/cco-stop.js +77 -0
  13. package/scripts/cco-userprompt-submit.js +83 -0
  14. package/scripts/lib/activation/account-state.js +37 -0
  15. package/scripts/lib/activation/activate-command.js +114 -0
  16. package/scripts/lib/activation/activation-runner.js +607 -0
  17. package/scripts/lib/activation/activation-self-healing.js +481 -0
  18. package/scripts/lib/activation/activation-state.js +96 -0
  19. package/scripts/lib/activation/activation-summary.js +241 -0
  20. package/scripts/lib/activation/adapters/claude-code.js +77 -0
  21. package/scripts/lib/activation/adapters/codex-cli.js +52 -0
  22. package/scripts/lib/activation/adapters/cursor.js +37 -0
  23. package/scripts/lib/activation/adapters/github-agent.js +39 -0
  24. package/scripts/lib/activation/adapters/terminal.js +42 -0
  25. package/scripts/lib/activation/adapters/vscode.js +39 -0
  26. package/scripts/lib/activation/adapters/windsurf.js +37 -0
  27. package/scripts/lib/activation/ai-surface-detector.js +151 -0
  28. package/scripts/lib/activation/connect-account.js +145 -0
  29. package/scripts/lib/activation/detect-environment.js +75 -0
  30. package/scripts/lib/activation/detect-hosts.js +62 -0
  31. package/scripts/lib/activation/format-activation-output.js +109 -0
  32. package/scripts/lib/activation/next-action.js +43 -0
  33. package/scripts/lib/activation/repair-engine.js +219 -0
  34. package/scripts/lib/activation/run-entry.js +346 -0
  35. package/scripts/lib/activation-distribution-readiness.js +507 -0
  36. package/scripts/lib/adapter-conformance.js +176 -0
  37. package/scripts/lib/adapter-readiness.js +428 -0
  38. package/scripts/lib/adapter-safety-boundaries.js +335 -0
  39. package/scripts/lib/adapter-technical-readiness-gate.js +205 -0
  40. package/scripts/lib/agent-access-governance.js +455 -0
  41. package/scripts/lib/agent-activation-readiness.js +878 -0
  42. package/scripts/lib/agent-enforcement.js +765 -0
  43. package/scripts/lib/agent-evolution-loop.js +479 -0
  44. package/scripts/lib/agent-policy-profile.js +210 -0
  45. package/scripts/lib/agent-security/action-evaluator.js +507 -0
  46. package/scripts/lib/agent-security/adapter-registry.js +98 -0
  47. package/scripts/lib/agent-security/auto-policy.js +139 -0
  48. package/scripts/lib/agent-security/bounded-scan.js +93 -0
  49. package/scripts/lib/agent-security/enforcement-adapter.js +174 -0
  50. package/scripts/lib/agent-security/enforcement-engine.js +1129 -0
  51. package/scripts/lib/agent-security/file-write-adapter.js +183 -0
  52. package/scripts/lib/agent-security/file-write-rules.js +178 -0
  53. package/scripts/lib/agent-security/index.js +3342 -0
  54. package/scripts/lib/agent-security/instruction-risk.js +181 -0
  55. package/scripts/lib/agent-security/mcp-action-adapter.js +185 -0
  56. package/scripts/lib/agent-security/mcp-action-rules.js +184 -0
  57. package/scripts/lib/agent-security/package-action-adapter.js +175 -0
  58. package/scripts/lib/agent-security/package-action-rules.js +233 -0
  59. package/scripts/lib/agent-security/performance.js +148 -0
  60. package/scripts/lib/agent-security/permission-minimizer.js +403 -0
  61. package/scripts/lib/agent-security/scan-cache.js +74 -0
  62. package/scripts/lib/agent-security/source-trust.js +146 -0
  63. package/scripts/lib/ai-efficiency-dogfood-pack.js +437 -0
  64. package/scripts/lib/ai-efficiency-eval.js +207 -0
  65. package/scripts/lib/ai-efficiency-guard-contract.js +209 -0
  66. package/scripts/lib/ai-efficiency-measured-value.js +106 -0
  67. package/scripts/lib/ai-install-prompt.js +293 -0
  68. package/scripts/lib/ai-task-inference.js +155 -0
  69. package/scripts/lib/ai-value-ledger.js +121 -0
  70. package/scripts/lib/ai-value-proof-table.js +151 -0
  71. package/scripts/lib/ai-work-efficiency-routing.js +623 -0
  72. package/scripts/lib/ai-workspace-hygiene.js +1499 -0
  73. package/scripts/lib/alpha-activation.js +520 -0
  74. package/scripts/lib/alpha-feedback.js +263 -0
  75. package/scripts/lib/alpha-readiness-gate.js +332 -0
  76. package/scripts/lib/anti-gaming.js +169 -0
  77. package/scripts/lib/artifact-health.js +431 -0
  78. package/scripts/lib/artifact-receipt-hygiene.js +619 -0
  79. package/scripts/lib/attribution.js +180 -0
  80. package/scripts/lib/audit.js +289 -0
  81. package/scripts/lib/avorelo-skill-registry.js +810 -0
  82. package/scripts/lib/batch-jobs.js +71 -0
  83. package/scripts/lib/brain-pack.js +578 -0
  84. package/scripts/lib/brand-boundary.js +424 -0
  85. package/scripts/lib/brand.js +74 -0
  86. package/scripts/lib/browser-capability.js +1048 -0
  87. package/scripts/lib/browser-proof-governed-workflow.js +1020 -0
  88. package/scripts/lib/browser-proof-preflight.js +321 -0
  89. package/scripts/lib/cache-readiness.js +296 -0
  90. package/scripts/lib/canonical-reentry.js +162 -0
  91. package/scripts/lib/capability-contract-validator.js +177 -0
  92. package/scripts/lib/capability-hygiene.js +504 -0
  93. package/scripts/lib/capability-intake-quarantine.js +789 -0
  94. package/scripts/lib/capability-kernel-registry.js +566 -0
  95. package/scripts/lib/capability-kernel.js +202 -0
  96. package/scripts/lib/capability-manifest.js +255 -0
  97. package/scripts/lib/capability-outcome-normalizer.js +104 -0
  98. package/scripts/lib/capability-packs.js +314 -0
  99. package/scripts/lib/capability-recommender.js +513 -0
  100. package/scripts/lib/capability-registry.js +1062 -0
  101. package/scripts/lib/carry-forward-surfacing.js +194 -0
  102. package/scripts/lib/ccusage-adapter.js +188 -0
  103. package/scripts/lib/claude-session-evidence/index.js +1027 -0
  104. package/scripts/lib/cli-output-sanitizer.js +118 -0
  105. package/scripts/lib/company-loop.js +1149 -0
  106. package/scripts/lib/config.js +641 -0
  107. package/scripts/lib/context-acquisition-plan.js +359 -0
  108. package/scripts/lib/context-authority-rules.js +138 -0
  109. package/scripts/lib/context-budget-guard.js +170 -0
  110. package/scripts/lib/context-budget-scanner.js +257 -0
  111. package/scripts/lib/context-budget.js +167 -0
  112. package/scripts/lib/context-claim-safety.js +116 -0
  113. package/scripts/lib/context-compiler.js +236 -0
  114. package/scripts/lib/context-optimizer.js +715 -0
  115. package/scripts/lib/context-packet.js +121 -0
  116. package/scripts/lib/context-receipt.js +57 -0
  117. package/scripts/lib/context-reduction-plan.js +179 -0
  118. package/scripts/lib/context-safety.js +88 -0
  119. package/scripts/lib/context-savings-engine.js +158 -0
  120. package/scripts/lib/context-source-registry.js +393 -0
  121. package/scripts/lib/context-task-profiles.js +147 -0
  122. package/scripts/lib/cost-abuse-guard.js +975 -0
  123. package/scripts/lib/cost-evidence.js +287 -0
  124. package/scripts/lib/cost-to-outcome-signals.js +639 -0
  125. package/scripts/lib/cross-host-install-plan.js +308 -0
  126. package/scripts/lib/cross-host-install-readiness.js +242 -0
  127. package/scripts/lib/cross-host-value-flow.js +268 -0
  128. package/scripts/lib/dashboard.js +1056 -0
  129. package/scripts/lib/data-permissions-guard.js +1187 -0
  130. package/scripts/lib/deployment-environment-guard.js +1236 -0
  131. package/scripts/lib/design-partner-feedback.js +346 -0
  132. package/scripts/lib/dogfood-evidence-freshness.js +567 -0
  133. package/scripts/lib/efficiency-receipt.js +354 -0
  134. package/scripts/lib/entitlements.js +100 -0
  135. package/scripts/lib/execution-packet.js +559 -0
  136. package/scripts/lib/execution-route-governor.js +179 -0
  137. package/scripts/lib/experimentation-events.js +547 -0
  138. package/scripts/lib/external-capability-compliance.js +107 -0
  139. package/scripts/lib/external-readiness/ai-visibility/ai-visibility-runner.js +322 -0
  140. package/scripts/lib/external-readiness/calibration/benchmark-site-catalog.js +121 -0
  141. package/scripts/lib/external-readiness/calibration/completion-gate.js +112 -0
  142. package/scripts/lib/external-readiness/calibration/real-site-benchmark-runner.js +284 -0
  143. package/scripts/lib/external-readiness/drift-detector.js +100 -0
  144. package/scripts/lib/external-readiness/endpoint-prober.js +332 -0
  145. package/scripts/lib/external-readiness/external-readiness-runner.js +112 -0
  146. package/scripts/lib/external-readiness/full-agent-readiness-scorer.js +220 -0
  147. package/scripts/lib/external-readiness/golden-path-runner.js +333 -0
  148. package/scripts/lib/external-readiness/inside-out-runner.js +118 -0
  149. package/scripts/lib/external-readiness/proof-receipt-writer.js +112 -0
  150. package/scripts/lib/external-readiness/safe-fix-executor.js +117 -0
  151. package/scripts/lib/external-readiness/skills/category-boundary-guard.js +30 -0
  152. package/scripts/lib/external-readiness/skills/pmm-positioning-guard.js +69 -0
  153. package/scripts/lib/external-readiness/skills/safe-fix-policy.js +35 -0
  154. package/scripts/lib/external-user-simulation.js +166 -0
  155. package/scripts/lib/failure-recovery-readiness.js +81 -0
  156. package/scripts/lib/failure-recovery.js +419 -0
  157. package/scripts/lib/feedback-intelligence.js +537 -0
  158. package/scripts/lib/feedback-signals.js +205 -0
  159. package/scripts/lib/file-integrity.js +68 -0
  160. package/scripts/lib/fsx.js +129 -0
  161. package/scripts/lib/full-readiness-gate.js +451 -0
  162. package/scripts/lib/governed-action-exposure-primitives.js +1514 -0
  163. package/scripts/lib/governed-exposure-planner.js +186 -0
  164. package/scripts/lib/governed-workspace-hygiene.js +946 -0
  165. package/scripts/lib/guard-suite-common.js +412 -0
  166. package/scripts/lib/guidance-builder.js +174 -0
  167. package/scripts/lib/hook-apply.js +1075 -0
  168. package/scripts/lib/hook-baseline.js +310 -0
  169. package/scripts/lib/hook-config-preview.js +275 -0
  170. package/scripts/lib/hook-contracts.js +290 -0
  171. package/scripts/lib/hook-safety-boundary-readiness.js +80 -0
  172. package/scripts/lib/host-capability-matrix.js +351 -0
  173. package/scripts/lib/host-support-context.js +254 -0
  174. package/scripts/lib/http-hook-action.js +538 -0
  175. package/scripts/lib/install-ai-readiness.js +84 -0
  176. package/scripts/lib/install-intake-risk.js +1051 -0
  177. package/scripts/lib/install-journey-intelligence.js +329 -0
  178. package/scripts/lib/intervention-guidance.js +57 -0
  179. package/scripts/lib/known-limitations.js +115 -0
  180. package/scripts/lib/l8-path-truth.js +146 -0
  181. package/scripts/lib/launch-hardening-gate.js +436 -0
  182. package/scripts/lib/launch-readiness.js +635 -0
  183. package/scripts/lib/learning-experimentation-foundation.js +1484 -0
  184. package/scripts/lib/learning-memory.js +686 -0
  185. package/scripts/lib/lifecycle-hooks.js +982 -0
  186. package/scripts/lib/local-package-smoke.js +436 -0
  187. package/scripts/lib/local-pricing.js +299 -0
  188. package/scripts/lib/mcp-enforcement.js +311 -0
  189. package/scripts/lib/mcp-least-privilege-policy.js +303 -0
  190. package/scripts/lib/mcp-tool-inventory.js +388 -0
  191. package/scripts/lib/mcp-tool-risk.js +0 -0
  192. package/scripts/lib/memory.js +335 -0
  193. package/scripts/lib/metrics.js +699 -0
  194. package/scripts/lib/micro-proof.js +133 -0
  195. package/scripts/lib/model-work-class-routing.js +79 -0
  196. package/scripts/lib/next-run-context.js +436 -0
  197. package/scripts/lib/next-run-continuity.js +1207 -0
  198. package/scripts/lib/observability-recovery-guard.js +1030 -0
  199. package/scripts/lib/operating-value.js +1662 -0
  200. package/scripts/lib/optimization-v3.js +122 -0
  201. package/scripts/lib/orchestration/adapters/_shared.js +49 -0
  202. package/scripts/lib/orchestration/adapters/aider.js +18 -0
  203. package/scripts/lib/orchestration/adapters/claude-code.js +35 -0
  204. package/scripts/lib/orchestration/adapters/codex.js +35 -0
  205. package/scripts/lib/orchestration/adapters/gemini-cli.js +18 -0
  206. package/scripts/lib/orchestration/adapters/git.js +25 -0
  207. package/scripts/lib/orchestration/adapters/index.js +31 -0
  208. package/scripts/lib/orchestration/adapters/lm-studio.js +18 -0
  209. package/scripts/lib/orchestration/adapters/ollama.js +18 -0
  210. package/scripts/lib/orchestration/adapters/opencode.js +18 -0
  211. package/scripts/lib/orchestration/adapters/openrouter.js +18 -0
  212. package/scripts/lib/orchestration/adapters/test-runner.js +25 -0
  213. package/scripts/lib/orchestration/cli.js +438 -0
  214. package/scripts/lib/orchestration/execution-manager.js +279 -0
  215. package/scripts/lib/orchestration/handoff.js +314 -0
  216. package/scripts/lib/orchestration/index.js +456 -0
  217. package/scripts/lib/orchestration/inventory.js +47 -0
  218. package/scripts/lib/orchestration/model-discovery.js +498 -0
  219. package/scripts/lib/orchestration/model-profiler.js +170 -0
  220. package/scripts/lib/orchestration/model-profiles.js +252 -0
  221. package/scripts/lib/orchestration/model-refresh-policy.js +72 -0
  222. package/scripts/lib/orchestration/proof-writer.js +349 -0
  223. package/scripts/lib/orchestration/provider-discovery/aider.js +49 -0
  224. package/scripts/lib/orchestration/provider-discovery/claude-code.js +56 -0
  225. package/scripts/lib/orchestration/provider-discovery/codex.js +49 -0
  226. package/scripts/lib/orchestration/provider-discovery/common.js +186 -0
  227. package/scripts/lib/orchestration/provider-discovery/gemini.js +106 -0
  228. package/scripts/lib/orchestration/provider-discovery/lm-studio.js +118 -0
  229. package/scripts/lib/orchestration/provider-discovery/models-dev.js +12 -0
  230. package/scripts/lib/orchestration/provider-discovery/ollama.js +100 -0
  231. package/scripts/lib/orchestration/provider-discovery/opencode.js +47 -0
  232. package/scripts/lib/orchestration/provider-discovery/openrouter.js +44 -0
  233. package/scripts/lib/orchestration/risk-classifier.js +130 -0
  234. package/scripts/lib/orchestration/routing-policy.js +486 -0
  235. package/scripts/lib/orchestration/settings.js +95 -0
  236. package/scripts/lib/orchestration/state.js +165 -0
  237. package/scripts/lib/orchestration/verification-manager.js +138 -0
  238. package/scripts/lib/outcome-evidence-stack.js +1083 -0
  239. package/scripts/lib/output-profiles.js +146 -0
  240. package/scripts/lib/package-content-audit.js +368 -0
  241. package/scripts/lib/package-runtime.js +278 -0
  242. package/scripts/lib/plan-surface.js +53 -0
  243. package/scripts/lib/plans.js +2327 -0
  244. package/scripts/lib/policy-provider.js +27 -0
  245. package/scripts/lib/prelaunch-activation-readiness.js +409 -0
  246. package/scripts/lib/prelaunch-evidence-store.js +816 -0
  247. package/scripts/lib/prelaunch-intelligence.js +869 -0
  248. package/scripts/lib/pricing-experiment.js +118 -0
  249. package/scripts/lib/pro-moment-events.js +77 -0
  250. package/scripts/lib/pro-moment-state.js +227 -0
  251. package/scripts/lib/pro-moments.js +1216 -0
  252. package/scripts/lib/product-home-receipt.js +1790 -0
  253. package/scripts/lib/product-learning-events.js +696 -0
  254. package/scripts/lib/production-confidence-control-tower.js +1209 -0
  255. package/scripts/lib/production-confidence.js +1858 -0
  256. package/scripts/lib/project-profile.js +555 -0
  257. package/scripts/lib/prompt-compiler-plan.js +94 -0
  258. package/scripts/lib/prompt-compiler.js +280 -0
  259. package/scripts/lib/prompt-lint.js +32 -0
  260. package/scripts/lib/prompt-suggestions.js +52 -0
  261. package/scripts/lib/proof-canonical.js +398 -0
  262. package/scripts/lib/proof-drilldown.js +383 -0
  263. package/scripts/lib/proof-e2e/promise-completion.js +141 -0
  264. package/scripts/lib/proof-e2e/promise-dashboard-claims.js +135 -0
  265. package/scripts/lib/proof-e2e/promise-local-proof.js +156 -0
  266. package/scripts/lib/proof-e2e/promise-provider-neutral.js +136 -0
  267. package/scripts/lib/proof-e2e/promise-registry.js +219 -0
  268. package/scripts/lib/proof-e2e/promise-security-trust.js +141 -0
  269. package/scripts/lib/proof-e2e/promise-skills-risk.js +163 -0
  270. package/scripts/lib/proof-e2e/promise-token-savings.js +112 -0
  271. package/scripts/lib/proof-e2e/promise-work-management.js +126 -0
  272. package/scripts/lib/proof-events.js +342 -0
  273. package/scripts/lib/proof-history.js +243 -0
  274. package/scripts/lib/proof-metrics.js +296 -0
  275. package/scripts/lib/proof-outcome-evidence.js +134 -0
  276. package/scripts/lib/proof-receipt.js +335 -0
  277. package/scripts/lib/proof-record.js +461 -0
  278. package/scripts/lib/proof-savings-report.js +1549 -0
  279. package/scripts/lib/public-activation-distribution-gate.js +266 -0
  280. package/scripts/lib/public-cli.js +5631 -0
  281. package/scripts/lib/public-distribution-truth.js +211 -0
  282. package/scripts/lib/public-distribution.js +73 -0
  283. package/scripts/lib/public-install-claim-checker.js +300 -0
  284. package/scripts/lib/publish-provenance-readiness.js +287 -0
  285. package/scripts/lib/readiness-delta.js +218 -0
  286. package/scripts/lib/readiness-evidence-closure.js +196 -0
  287. package/scripts/lib/reentry-memory-capture.js +241 -0
  288. package/scripts/lib/reentry-memory-retrieval.js +302 -0
  289. package/scripts/lib/reentry-memory-status.js +147 -0
  290. package/scripts/lib/reentry-memory-store.js +183 -0
  291. package/scripts/lib/reentry-state.js +66 -0
  292. package/scripts/lib/release-candidate-bundle.js +166 -0
  293. package/scripts/lib/remediation.js +81 -0
  294. package/scripts/lib/repo-map.js +391 -0
  295. package/scripts/lib/run-action-policy.js +104 -0
  296. package/scripts/lib/run-contract-receipt.js +48 -0
  297. package/scripts/lib/run-contract.js +288 -0
  298. package/scripts/lib/run-cost-to-verified-outcome.js +87 -0
  299. package/scripts/lib/run-improvements-lifecycle.js +330 -0
  300. package/scripts/lib/run-improvements.js +789 -0
  301. package/scripts/lib/run-proof-contract.js +116 -0
  302. package/scripts/lib/run-risk-classifier.js +131 -0
  303. package/scripts/lib/run-task-classifier.js +216 -0
  304. package/scripts/lib/runtime-decision-policy.js +387 -0
  305. package/scripts/lib/safe-path-engine.js +705 -0
  306. package/scripts/lib/safe-repair.js +877 -0
  307. package/scripts/lib/safe-run-controller.js +887 -0
  308. package/scripts/lib/scope-repair-before-approval.js +865 -0
  309. package/scripts/lib/score.js +262 -0
  310. package/scripts/lib/seamless-enforcement.js +329 -0
  311. package/scripts/lib/seamless-outcome.js +689 -0
  312. package/scripts/lib/seamless-reality-gate.js +5053 -0
  313. package/scripts/lib/security-confidence/activation-safety.js +78 -0
  314. package/scripts/lib/security-confidence/adapters/adapter-contract.js +125 -0
  315. package/scripts/lib/security-confidence/adapters/mock-claude-bughunter-adapter.js +36 -0
  316. package/scripts/lib/security-confidence/adapters/mock-decepticon-adapter.js +34 -0
  317. package/scripts/lib/security-confidence/adapters/mock-mcp-scan-adapter.js +35 -0
  318. package/scripts/lib/security-confidence/adapters/mock-snyk-agent-scan-adapter.js +35 -0
  319. package/scripts/lib/security-confidence/adapters/mock-tank-adapter.js +34 -0
  320. package/scripts/lib/security-confidence/adapters/reference-registry.js +63 -0
  321. package/scripts/lib/security-confidence/auth-rbac-plan.js +39 -0
  322. package/scripts/lib/security-confidence/component-inventory.js +151 -0
  323. package/scripts/lib/security-confidence/constants.js +191 -0
  324. package/scripts/lib/security-confidence/dependency-script-risk.js +95 -0
  325. package/scripts/lib/security-confidence/evidence-hygiene.js +127 -0
  326. package/scripts/lib/security-confidence/feature-impact-classifier.js +80 -0
  327. package/scripts/lib/security-confidence/file-utils.js +161 -0
  328. package/scripts/lib/security-confidence/finding-triage.js +90 -0
  329. package/scripts/lib/security-confidence/findings.js +115 -0
  330. package/scripts/lib/security-confidence/index.js +29 -0
  331. package/scripts/lib/security-confidence/permission-budget.js +93 -0
  332. package/scripts/lib/security-confidence/redaction.js +82 -0
  333. package/scripts/lib/security-confidence/redteam-fixtures.js +53 -0
  334. package/scripts/lib/security-confidence/reference-adoption.js +229 -0
  335. package/scripts/lib/security-confidence/reference-taxonomy.js +155 -0
  336. package/scripts/lib/security-confidence/report-quality.js +99 -0
  337. package/scripts/lib/security-confidence/report-writer.js +79 -0
  338. package/scripts/lib/security-confidence/risk-classifier.js +187 -0
  339. package/scripts/lib/security-confidence/runner.js +179 -0
  340. package/scripts/lib/security-confidence/schema.js +188 -0
  341. package/scripts/lib/security-confidence/secret-safety.js +74 -0
  342. package/scripts/lib/security-confidence/security-capability-router.js +98 -0
  343. package/scripts/lib/security-confidence/web-security-smoke-plan.js +46 -0
  344. package/scripts/lib/security-risk-classifier.js +511 -0
  345. package/scripts/lib/security-scan.js +396 -0
  346. package/scripts/lib/session-context-optimizer.js +1211 -0
  347. package/scripts/lib/session-timing.js +322 -0
  348. package/scripts/lib/skill-hygiene.js +805 -0
  349. package/scripts/lib/skill-packs.js +161 -0
  350. package/scripts/lib/skills-operating-layer-v1.js +1023 -0
  351. package/scripts/lib/skills-operating-layer.js +629 -0
  352. package/scripts/lib/smallest-safe-plan.js +214 -0
  353. package/scripts/lib/smart-routing-plan.js +115 -0
  354. package/scripts/lib/smart-work-routing.js +768 -0
  355. package/scripts/lib/source-catalog.js +1022 -0
  356. package/scripts/lib/status-value-summary.js +32 -0
  357. package/scripts/lib/supply-chain-dependency-guard.js +1333 -0
  358. package/scripts/lib/supply-chain-guard.js +219 -0
  359. package/scripts/lib/support-bundle.js +561 -0
  360. package/scripts/lib/support-redaction.js +66 -0
  361. package/scripts/lib/task-continuation.js +440 -0
  362. package/scripts/lib/test-helpers.js +15 -0
  363. package/scripts/lib/tier.js +38 -0
  364. package/scripts/lib/token-context-quality-gate.js +370 -0
  365. package/scripts/lib/token-cost-capture.js +187 -0
  366. package/scripts/lib/token-cost-evidence.js +862 -0
  367. package/scripts/lib/token-cost-intelligence.js +358 -0
  368. package/scripts/lib/token-efficiency-evidence.js +213 -0
  369. package/scripts/lib/token-efficiency-map.js +110 -0
  370. package/scripts/lib/token-evidence.js +703 -0
  371. package/scripts/lib/tokenish.js +17 -0
  372. package/scripts/lib/tool-output-sandbox.js +559 -0
  373. package/scripts/lib/trust-audit.js +136 -0
  374. package/scripts/lib/unified-events.js +396 -0
  375. package/scripts/lib/upgrade-interruption-recovery.js +407 -0
  376. package/scripts/lib/usage-ledger.js +201 -0
  377. package/scripts/lib/value-ledger.js +130 -0
  378. package/scripts/lib/value-proof-calibration.js +531 -0
  379. package/scripts/lib/visual-qa.js +231 -0
  380. package/scripts/lib/voice-alpha.js +29 -0
  381. package/scripts/lib/webhook-idempotency-guard.js +990 -0
  382. package/scripts/lib/work-aware-orchestration.js +976 -0
  383. package/scripts/lib/work-control-receipts.js +577 -0
  384. package/scripts/lib/work-ledger.js +1123 -0
  385. package/scripts/lib/work-panel-preview.js +352 -0
  386. package/scripts/lib/workflow-discipline.js +280 -0
  387. package/scripts/lib/workflow-intelligence-radar.js +804 -0
  388. package/scripts/lib/workflow-signals.js +419 -0
  389. package/scripts/lib/workspace-map.js +281 -0
  390. package/scripts/lib/workspace-registry.js +1367 -0
  391. package/scripts/lib/workspace-resolver.js +542 -0
  392. package/scripts/wuz-doctor.js +315 -0
  393. package/bin/avorelo.mjs +0 -7
  394. package/dist/avorelo.mjs +0 -24678
@@ -0,0 +1,540 @@
1
+ "use strict";
2
+
3
+ const { buildStatusDashboard } = require("./lib/dashboard");
4
+ const { buildValueSummary } = require("./lib/status-value-summary");
5
+ const { buildPlanSurface } = require("./lib/plan-surface");
6
+ const { formatProductHomeStatusLine } = require("./lib/product-home-receipt");
7
+ const { formatAgentActivationStatusLine } = require("./lib/agent-activation-readiness");
8
+ const {
9
+ buildCompactProMomentLines,
10
+ buildProMomentSurface,
11
+ recordProMomentEvaluation,
12
+ } = require("./lib/pro-moments");
13
+
14
+ function optionalRequire(modulePath, fallback) {
15
+ try {
16
+ return require(modulePath);
17
+ } catch {
18
+ return fallback;
19
+ }
20
+ }
21
+
22
+ const { formatReentryMemoryText } = optionalRequire("./lib/reentry-memory-status", {
23
+ formatReentryMemoryText: () => null,
24
+ });
25
+ const { formatBudgetStatusText } = optionalRequire("./lib/context-budget-guard", {
26
+ formatBudgetStatusText: () => null,
27
+ });
28
+ const { formatWorkflowDisciplineText } = optionalRequire("./lib/workflow-discipline", {
29
+ formatWorkflowDisciplineText: () => null,
30
+ });
31
+ const { ValueLedger, buildValueLedgerSummary, formatValueLedgerLine } = optionalRequire("./lib/value-ledger", {
32
+ ValueLedger: class {
33
+ loadAll() {
34
+ return [];
35
+ }
36
+ },
37
+ buildValueLedgerSummary: () => null,
38
+ formatValueLedgerLine: () => null,
39
+ });
40
+ const { buildContextSafetyStatus } = optionalRequire("./lib/context-safety", {
41
+ buildContextSafetyStatus: () => ({ showInStatus: false, statusLine: null }),
42
+ });
43
+ const { formatRunImprovementsText } = optionalRequire("./lib/run-improvements", {
44
+ formatRunImprovementsText: () => null,
45
+ });
46
+ const { formatLearningSummaryStatusLine } = optionalRequire("./lib/learning-memory", {
47
+ formatLearningSummaryStatusLine: () => null,
48
+ });
49
+ const { formatProofSavingsStatusLine, buildProofSavingsSurface } = optionalRequire(
50
+ "./lib/proof-savings-report",
51
+ {
52
+ formatProofSavingsStatusLine: () => null,
53
+ buildProofSavingsSurface: () => ({
54
+ showInStatus: false,
55
+ statusLine: null,
56
+ evidenceQuality: null,
57
+ estimatedSavings: null,
58
+ openRisks: 0,
59
+ nextBestAction: null,
60
+ validatedSignalCount: 0,
61
+ savingsConfidence: "insufficient",
62
+ }),
63
+ }
64
+ );
65
+
66
+ function loadLastScore(cwd) {
67
+ try {
68
+ const p = require("path").join(cwd, ".claude", "cco", "state", "last-score.json");
69
+ if (!require("fs").existsSync(p)) return null;
70
+ const raw = require("fs").readFileSync(p, "utf8");
71
+ return JSON.parse(raw);
72
+ } catch {
73
+ return null;
74
+ }
75
+ }
76
+
77
+ function formatLastScoreLine(score) {
78
+ if (!score || !score.status || score.status === "NO DATA") return null;
79
+ const runPart = score.runId ? ` (run: ${score.runId})` : "";
80
+ return `Last score: ${score.status}${runPart} — ${score.reason}`;
81
+ }
82
+ const { buildActivationSummary, formatActivationStatusLine } = optionalRequire("./lib/activation/activation-summary", {
83
+ buildActivationSummary: () => null,
84
+ formatActivationStatusLine: () => "Activation: local status surface unavailable",
85
+ });
86
+ const { readWorkspaceMap } = optionalRequire("./lib/workspace-map", {
87
+ readWorkspaceMap: () => null,
88
+ });
89
+ const { buildSessionContextSurface } = optionalRequire("./lib/session-context-optimizer", {
90
+ buildSessionContextSurface: () => null,
91
+ });
92
+ const { summarizeLatestLearningSignals } = optionalRequire("./lib/product-learning-events", {
93
+ summarizeLatestLearningSignals: () => null,
94
+ });
95
+
96
+ function formatCurrentStateLines(status) {
97
+ const currentState = status.currentState || null;
98
+ if (!currentState) {
99
+ return [
100
+ "Current state:",
101
+ "- No current-state surface is available.",
102
+ ];
103
+ }
104
+
105
+ const lines = ["Current state:"];
106
+ const truthSource = currentState.truthSource || "none";
107
+ lines.push(`- Truth source: ${truthSource}`);
108
+
109
+ if (currentState.whereAmINow) {
110
+ lines.push(`- Where am I now: ${currentState.whereAmINow}`);
111
+ }
112
+ if (currentState.whatCanIHonestlyClaim) {
113
+ lines.push(`- What can I honestly claim: ${currentState.whatCanIHonestlyClaim}`);
114
+ }
115
+ if (currentState.nextBoundedAction) {
116
+ lines.push(`- What should I do next: ${currentState.nextBoundedAction}`);
117
+ }
118
+ if (currentState.reentryStatus) {
119
+ lines.push(`- Re-entry: ${currentState.reentryStatus}`);
120
+ }
121
+ if (currentState.latestTrustworthyRunId) {
122
+ lines.push(`- Trustworthy run: ${currentState.latestTrustworthyRunId}`);
123
+ }
124
+ if (currentState.readinessState) {
125
+ lines.push(`- Readiness: ${currentState.readinessState}`);
126
+ }
127
+ if (currentState.rollbackAvailable === true) {
128
+ lines.push("- Rollback: available");
129
+ }
130
+ if (Array.isArray(currentState.limitations)) {
131
+ currentState.limitations.filter(Boolean).forEach((item) => lines.push(`- Note: ${item}`));
132
+ }
133
+ return lines;
134
+ }
135
+
136
+ function resolveStatus(input) {
137
+ if (typeof input === "string") {
138
+ return buildStatusDashboard(input, { limit: 7 });
139
+ }
140
+ if (input && typeof input === "object") {
141
+ return input;
142
+ }
143
+ return buildStatusDashboard(process.env.PROJECT_CWD || process.cwd(), { limit: 7 });
144
+ }
145
+
146
+ function workspaceMapLine(cwd) {
147
+ const map = readWorkspaceMap(cwd);
148
+ if (!map) return null;
149
+ return `Workspace Map: ${map.status} · ${map.capabilitiesMapped} capabilities · ${map.topGaps[0] || "no major gaps"}`;
150
+ }
151
+
152
+ function learningLine(cwd) {
153
+ const summary = summarizeLatestLearningSignals(cwd);
154
+ if (!summary || !summary.totalEvents) return null;
155
+ const top = summary.topEvents[0];
156
+ return `Product learning: ${summary.totalEvents} local events${top ? ` · top=${top.eventName}` : ""}`;
157
+ }
158
+
159
+ function formatBoundedStatus(statusInput) {
160
+ const status = resolveStatus(statusInput);
161
+ const cwd = typeof statusInput === "string"
162
+ ? statusInput
163
+ : (status?.cwd || process.env.PROJECT_CWD || process.cwd());
164
+ const planSurface = buildPlanSurface(cwd);
165
+ const proMoment = status?.proMoment || buildProMomentSurface(cwd, {
166
+ surface: "status",
167
+ status,
168
+ });
169
+ const fixes = (status.topRecommendedFixes || []).slice(0, 3);
170
+ const summary = buildValueSummary(status);
171
+ const productHomeLine = status.productHome ? [formatProductHomeStatusLine(status.productHome)] : [];
172
+ const agentReadinessLine = status.agentReadiness ? [formatAgentActivationStatusLine(status.agentReadiness)] : [];
173
+ const agentSecurityLine = status.agentSecurity?.showInStatus ? [status.agentSecurity.statusLine] : [];
174
+ const governanceLine = status.agentAccessGovernance?.showInStatus ? [status.agentAccessGovernance.statusLine] : [];
175
+ const safePathLine = status.safePath?.showInStatus ? [status.safePath.statusLine] : [];
176
+ const intakeLine = status.installIntakeRisk?.showInStatus ? [status.installIntakeRisk.statusLine] : [];
177
+ const capabilityIntakeLine = status.capabilityIntake?.showInStatus ? [status.capabilityIntake.statusLine] : [];
178
+ const skillsLine = status.skillsOperatingLayer?.showInStatus ? [status.skillsOperatingLayer.statusLine] : [];
179
+ const governedActionExposureLine = status.governedActionExposure?.showInStatus ? [status.governedActionExposure.statusLine] : [];
180
+ const governedWorkspaceHygieneLine = status.governedWorkspaceHygiene?.showInStatus ? [status.governedWorkspaceHygiene.statusLine] : [];
181
+ const learningExperimentationLine = status.learningExperimentation?.showInStatus ? [status.learningExperimentation.statusLine] : [];
182
+ const browserCapabilityLine = status.browserCapability?.showInStatus ? [status.browserCapability.statusLine] : [];
183
+ const browserProofWorkflowLine = status.browserProofWorkflow?.showInStatus ? [status.browserProofWorkflow.statusLine] : [];
184
+ const safeRepairLine = status.safeRepair?.showInStatus ? [status.safeRepair.statusLine] : [];
185
+ const scopeRepairLine = status.scopeRepair?.showInStatus ? [status.scopeRepair.statusLine] : [];
186
+ const nextRunContinuityLine = status.nextRunContinuity?.showInStatus ? [status.nextRunContinuity.statusLine] : [];
187
+ const dataPermissionsLine = status.dataPermissions?.showInStatus ? [status.dataPermissions.statusLine] : [];
188
+ const deploymentEnvironmentLine = status.deploymentEnvironment?.showInStatus ? [status.deploymentEnvironment.statusLine] : [];
189
+ const aiEfficiencyRoutingLine = (() => {
190
+ try {
191
+ const { buildAiWorkEfficiencyRoutingSurface } = require("./lib/ai-work-efficiency-routing");
192
+ const s = buildAiWorkEfficiencyRoutingSurface(cwd, { buildIfMissing: false });
193
+ return s && s.showInStatus ? [s.statusLine] : [];
194
+ } catch { return []; }
195
+ })();
196
+ const supplyChainDependencyLine = status.supplyChainDependency?.showInStatus ? [status.supplyChainDependency.statusLine] : [];
197
+ const orchestrationLine = status.orchestration?.showInStatus ? [status.orchestration.statusLine] : [];
198
+ const outcomeEvidenceLine = status.outcomeEvidence?.showInStatus ? [status.outcomeEvidence.statusLine] : [];
199
+ const productionConfidenceLine = status.productionConfidence?.showInStatus ? [status.productionConfidence.statusLine] : [];
200
+ const valueSignalsLine = status.valueSignals?.showInStatus ? [status.valueSignals.statusLine] : [];
201
+ const agentModelOrchestrationLine = status.agentModelOrchestration?.status && status.agentModelOrchestration.status !== "not_run" && status.agentModelOrchestration.status !== "error"
202
+ ? [`Agent orchestration: FOUNDATION · workers=${status.agentModelOrchestration.stageCount || 0} stages · local=${status.agentModelOrchestration.localWorkersAvailable || 0} · limited=${status.agentModelOrchestration.limitedWorkers || 0} · next=${status.agentModelOrchestration.nextAction || "run avorelo route"}`]
203
+ : [];
204
+ const planSecurityLines = planSurface.security
205
+ ? [
206
+ `Plan security: ${planSurface.security.headlineLine}.`,
207
+ planSurface.security.postureLine,
208
+ planSurface.security.latestEvidence?.summary ? `Latest security evidence: ${planSurface.security.latestEvidence.summary}` : null,
209
+ ].filter(Boolean)
210
+ : [];
211
+ const visualQaLine = planSurface.visualQa?.quota?.tracked
212
+ ? [`Visual QA: ${planSurface.visualQa.quota.used}/${planSurface.visualQa.quota.limit} ${planSurface.visualQa.quota.period} used${planSurface.visualQa.runner.available ? "" : " · runner unavailable"}`]
213
+ : [];
214
+ const memoryText = formatReentryMemoryText(status.reentryMemory);
215
+ const memoryLines = memoryText ? [memoryText] : [];
216
+ const budgetText = formatBudgetStatusText(status.contextBudgetGuard);
217
+ const plan = status.contextBudgetGuard?.reductionPlan;
218
+ const planLines = plan
219
+ ? [
220
+ `Context budget: ${plan.estimatedTotalTokens} tokens estimated / ${plan.recommendedLimitTokens} limit${plan.overBudget ? " [OVER BUDGET]" : ""}`,
221
+ plan.topHotspot ? ` Top hotspot: ${plan.topHotspot.path} (${plan.topHotspot.estimatedTokens} tokens)` : null,
222
+ ` Action: ${plan.nextBestAction}`,
223
+ ].filter(Boolean)
224
+ : [];
225
+ const budgetLines = planLines.length > 0 ? planLines : (budgetText ? [budgetText] : []);
226
+ const workflowText = formatWorkflowDisciplineText(status.workflowDiscipline);
227
+ const workflowLines = workflowText ? [workflowText] : [];
228
+ const sessionContextLines = (() => {
229
+ try {
230
+ const sc = buildSessionContextSurface(cwd);
231
+ return sc?.showInStatus && sc.statusLine ? [sc.statusLine] : [];
232
+ } catch { return []; }
233
+ })();
234
+ const workspaceMapLines = (() => {
235
+ const line = workspaceMapLine(cwd);
236
+ return line ? [line] : [];
237
+ })();
238
+ const learningLines = (() => {
239
+ const line = learningLine(cwd);
240
+ return line ? [line] : [];
241
+ })();
242
+ const lastScoreLines = (() => {
243
+ try {
244
+ const s = loadLastScore(cwd);
245
+ const line = formatLastScoreLine(s);
246
+ return line ? [line] : [];
247
+ } catch { return []; }
248
+ })();
249
+ const ledgerLine = (() => {
250
+ try {
251
+ const ledger = new ValueLedger(cwd);
252
+ const events = ledger.loadAll();
253
+ const ledgerSummary = buildValueLedgerSummary(events);
254
+ const line = formatValueLedgerLine(ledgerSummary);
255
+ return line ? [line] : [];
256
+ } catch { return []; }
257
+ })();
258
+ const runImprovementsLines = (() => {
259
+ try {
260
+ const text = formatRunImprovementsText(cwd);
261
+ return text ? [text] : [];
262
+ } catch { return []; }
263
+ })();
264
+ const learningSummaryLines = (() => {
265
+ try {
266
+ const line = formatLearningSummaryStatusLine(cwd);
267
+ return line ? [line] : [];
268
+ } catch { return []; }
269
+ })();
270
+ const proofSavingsLines = (() => {
271
+ try {
272
+ const line = formatProofSavingsStatusLine(cwd);
273
+ return line ? [line] : [];
274
+ } catch { return []; }
275
+ })();
276
+ const contextSafetyLines = (() => {
277
+ try {
278
+ const s = buildContextSafetyStatus(cwd);
279
+ return s.showInStatus && s.statusLine ? [s.statusLine] : [];
280
+ } catch { return []; }
281
+ })();
282
+ const operatingValueLine = (() => {
283
+ try {
284
+ const { buildOperatingValueSurface } = require("./lib/operating-value");
285
+ const ov = buildOperatingValueSurface(cwd);
286
+ if (!ov || ov.status !== "available" || !ov.shouldShowInSession) return [];
287
+ const readiness = ov.readinessBand ? ` · readiness: ${ov.readinessBand}` : "";
288
+ return [`Operating value: ${ov.hero || "surfaces available"}${readiness}`];
289
+ } catch { return []; }
290
+ })();
291
+ const proMomentLines = buildCompactProMomentLines(proMoment);
292
+ const allLines = [
293
+ "Avorelo - Status",
294
+ `Plan: ${planSurface.planLabel}`,
295
+ ...(planSurface.overrideNote ? [planSurface.overrideNote] : []),
296
+ planSurface.includedLine,
297
+ `Focus: ${status.tier}`,
298
+ `Profile: ${status.profile || "balanced"}`,
299
+ formatActivationStatusLine(status.activation || buildActivationSummary(cwd)),
300
+ ...agentReadinessLine,
301
+ ...productHomeLine,
302
+ ...formatCurrentStateLines(status),
303
+ ...agentSecurityLine,
304
+ ...governanceLine,
305
+ ...safePathLine,
306
+ ...intakeLine,
307
+ ...capabilityIntakeLine,
308
+ ...skillsLine,
309
+ ...governedActionExposureLine,
310
+ ...governedWorkspaceHygieneLine,
311
+ ...learningExperimentationLine,
312
+ ...browserCapabilityLine,
313
+ ...browserProofWorkflowLine,
314
+ ...safeRepairLine,
315
+ ...scopeRepairLine,
316
+ ...nextRunContinuityLine,
317
+ ...dataPermissionsLine,
318
+ ...deploymentEnvironmentLine,
319
+ ...aiEfficiencyRoutingLine,
320
+ ...supplyChainDependencyLine,
321
+ ...orchestrationLine,
322
+ ...outcomeEvidenceLine,
323
+ ...productionConfidenceLine,
324
+ ...valueSignalsLine,
325
+ ...agentModelOrchestrationLine,
326
+ ...visualQaLine,
327
+ ...planSecurityLines,
328
+ ...contextSafetyLines,
329
+ "Top fixes:",
330
+ ...fixes.map((f, i) => `${i + 1}. ${f.text}`),
331
+ `Optimization next: ${status.nextBestAction || "No action pending"}`,
332
+ `Improvements: ~${status.benefitSummary?.minutesSavedEstimate || 0} min`,
333
+ `Summary: ${summary}`,
334
+ ...memoryLines,
335
+ ...budgetLines,
336
+ ...workflowLines,
337
+ ...sessionContextLines,
338
+ ...operatingValueLine,
339
+ ...proMomentLines,
340
+ ...workspaceMapLines,
341
+ ...learningLines,
342
+ ...lastScoreLines,
343
+ ...ledgerLine,
344
+ ...runImprovementsLines,
345
+ ...learningSummaryLines,
346
+ ...proofSavingsLines,
347
+ ];
348
+ return allLines.filter((line) => {
349
+ if (/^Activation:/i.test(line)) return true;
350
+ if (/^Agent readiness:/i.test(line)) return true;
351
+ if (/^Home:/i.test(line)) return true;
352
+ if (/^Capability intake:/i.test(line)) return true;
353
+ if (/\bNOT.?RUN\b/i.test(line)) return false;
354
+ if (/\bNO.?DATA\b/i.test(line)) return false;
355
+ if (/: PARTIAL\b/i.test(line)) return false;
356
+ if (/: partial\b/.test(line)) return false;
357
+ if (/latest receipt missing/i.test(line)) return false;
358
+ if (/receipt missing/i.test(line)) return false;
359
+ if (/reference source catalog/i.test(line)) return false;
360
+ if (/runner unavailable/i.test(line)) return false;
361
+ if (/needs attention/i.test(line)) return false;
362
+ if (/source catalog is missing/i.test(line)) return false;
363
+ return true;
364
+ }).join("\n");
365
+ }
366
+
367
+ function buildStatusJson(statusInput) {
368
+ const status = resolveStatus(statusInput);
369
+ const cwd = typeof statusInput === "string"
370
+ ? statusInput
371
+ : (status?.cwd || process.env.PROJECT_CWD || process.cwd());
372
+ const planSurface = buildPlanSurface(cwd);
373
+ let valueLedger = null;
374
+ let contextSafety = null;
375
+ try {
376
+ const ledger = new ValueLedger(cwd);
377
+ const events = ledger.loadAll();
378
+ valueLedger = buildValueLedgerSummary(events);
379
+ } catch {}
380
+ try {
381
+ contextSafety = buildContextSafetyStatus(cwd);
382
+ } catch {}
383
+ const activation = status.activation || buildActivationSummary(cwd);
384
+ const workspaceMap = readWorkspaceMap(cwd);
385
+ const productLearning = summarizeLatestLearningSignals(cwd);
386
+ const proMoment = status?.proMoment || buildProMomentSurface(cwd, {
387
+ surface: "status",
388
+ status,
389
+ });
390
+ let sessionContext = null;
391
+ try { sessionContext = buildSessionContextSurface(cwd); } catch {}
392
+ return {
393
+ statusDashboardVersion: status.statusDashboardVersion || 4,
394
+ cwd,
395
+ what: "Status snapshot generated.",
396
+ why: "Shows current bounded state first, then Time + Risk + Cost posture with deterministic top fixes.",
397
+ tier: status.tier,
398
+ profile: status.profile,
399
+ summaryFraming: status.teamRollup?.summaryFraming || "Time + Risk + Cost status summary.",
400
+ planSummary: planSurface,
401
+ securitySummary: planSurface.security || null,
402
+ nextBestAction: status.nextBestAction || "",
403
+ topRecommendedFixes: status.topRecommendedFixes || [],
404
+ topFixesNow: (status.topRecommendedFixes || []).slice(0, 3),
405
+ benefitSummary: status.benefitSummary || null,
406
+ weeklySummary: status.weeklySummary || null,
407
+ teamDefaultsApplied: status.teamDefaultsApplied || null,
408
+ teamRollup: status.teamRollup || null,
409
+ memorySummary: status.memorySummary || null,
410
+ contextBudgetPlan: status.contextBudgetPlan || null,
411
+ effectivenessScorecard: status.effectivenessScorecard || null,
412
+ settingsControls: status.settingsControls || null,
413
+ activation,
414
+ agentReadiness: status.agentReadiness || activation.agentReadiness || null,
415
+ productHome: status.productHome || null,
416
+ workspaceMap,
417
+ productLearning,
418
+ proMoment,
419
+ sessionContext,
420
+ governedWorkspaceHygiene: status.governedWorkspaceHygiene || null,
421
+ valueLedger,
422
+ contextSafety,
423
+ ...(status.agentSecurity ? { agentSecurity: status.agentSecurity } : {}),
424
+ ...(status.agentAccessGovernance ? { agentAccessGovernance: status.agentAccessGovernance } : {}),
425
+ ...(status.safePath ? { safePath: status.safePath } : {}),
426
+ ...(status.installIntakeRisk ? { installIntakeRisk: status.installIntakeRisk } : {}),
427
+ ...(status.capabilityIntake ? { capabilityIntake: status.capabilityIntake } : {}),
428
+ ...(status.skillsOperatingLayer ? { skillsOperatingLayer: status.skillsOperatingLayer } : {}),
429
+ ...(status.governedActionExposure ? { governedActionExposure: status.governedActionExposure } : {}),
430
+ ...(status.browserCapability ? { browserCapability: status.browserCapability } : {}),
431
+ ...(status.browserProofWorkflow ? { browserProofWorkflow: status.browserProofWorkflow } : {}),
432
+ ...(status.safeRepair ? { safeRepair: status.safeRepair } : {}),
433
+ ...(status.scopeRepair ? { scopeRepair: status.scopeRepair } : {}),
434
+ ...(status.nextRunContinuity ? { nextRunContinuity: status.nextRunContinuity } : {}),
435
+ ...(status.dataPermissions ? { dataPermissions: status.dataPermissions } : {}),
436
+ ...(status.deploymentEnvironment ? { deploymentEnvironment: status.deploymentEnvironment } : {}),
437
+ ...(status.supplyChainDependency ? { supplyChainDependency: status.supplyChainDependency } : {}),
438
+ ...(status.orchestration ? { orchestration: status.orchestration } : {}),
439
+ ...(status.outcomeEvidence ? { outcomeEvidence: status.outcomeEvidence } : {}),
440
+ ...(status.productionConfidence ? { productionConfidence: status.productionConfidence } : {}),
441
+ ...(status.valueSignals ? { valueSignals: status.valueSignals } : {}),
442
+ ...(status.agentModelOrchestration ? { agentModelOrchestration: status.agentModelOrchestration } : {}),
443
+ ...(status.promptContextTokenOptimization ? { promptContextTokenOptimization: status.promptContextTokenOptimization } : {}),
444
+ seamlessOutcome: (() => {
445
+ try {
446
+ const { buildSeamlessOutcomeSurface } = require("./lib/seamless-outcome");
447
+ return buildSeamlessOutcomeSurface(cwd);
448
+ } catch { return null; }
449
+ })(),
450
+ seamlessRealityGate: (() => {
451
+ try {
452
+ const { buildRealityGateSurface } = require("./lib/seamless-reality-gate");
453
+ return buildRealityGateSurface(cwd);
454
+ } catch { return null; }
455
+ })(),
456
+ workAwareOrchestration: (() => {
457
+ try {
458
+ const { buildWorkOrchestrationSurface } = require("./lib/work-aware-orchestration");
459
+ return buildWorkOrchestrationSurface(cwd);
460
+ } catch { return null; }
461
+ })(),
462
+ workLedger: (() => {
463
+ try {
464
+ const { buildWorkLedgerSurface } = require("./lib/work-ledger");
465
+ return buildWorkLedgerSurface(cwd);
466
+ } catch { return null; }
467
+ })(),
468
+ companyLoop: (() => {
469
+ try {
470
+ const { buildCompanyLoopSurface } = require("./lib/company-loop");
471
+ return buildCompanyLoopSurface(cwd);
472
+ } catch { return null; }
473
+ })(),
474
+ currentState: status.currentState || {
475
+ truthSource: "none",
476
+ isCanonicalTruthAvailable: false,
477
+ whereAmINow: null,
478
+ whatCanIHonestlyClaim: null,
479
+ nextBoundedAction: null,
480
+ reentryStatus: null,
481
+ latestTrustworthyRunId: null,
482
+ rollbackAvailable: null,
483
+ readinessState: null,
484
+ stateSource: null,
485
+ artifactRefs: [],
486
+ limitations: [],
487
+ },
488
+ reentryMemory: status.reentryMemory || null,
489
+ contextBudgetGuard: status.contextBudgetGuard || null,
490
+ workflowDiscipline: status.workflowDiscipline || null,
491
+ runImprovements: (() => {
492
+ try {
493
+ const { loadRunImprovements } = require("./lib/run-improvements");
494
+ return loadRunImprovements(cwd);
495
+ } catch { return null; }
496
+ })(),
497
+ proofSavings: (() => {
498
+ try {
499
+ const surface = buildProofSavingsSurface(cwd);
500
+ return {
501
+ evidenceQuality: surface.evidenceQuality,
502
+ estimatedSavings: surface.estimatedSavings,
503
+ openRisks: surface.openRisks,
504
+ nextBestAction: surface.nextBestAction,
505
+ validatedSignalCount: surface.validatedSignalCount,
506
+ savingsConfidence: surface.savingsConfidence,
507
+ };
508
+ } catch { return null; }
509
+ })(),
510
+ };
511
+ }
512
+
513
+ function parseArgs(argv) {
514
+ return {
515
+ text: argv.includes("--text"),
516
+ json: argv.includes("--json"),
517
+ };
518
+ }
519
+
520
+ function main() {
521
+ const args = parseArgs(process.argv.slice(2));
522
+ const cwd = process.env.PROJECT_CWD || process.cwd();
523
+ const response = buildStatusJson(cwd);
524
+ if (args.text && !args.json) {
525
+ process.stdout.write(`${formatBoundedStatus(response)}\n`);
526
+ recordProMomentEvaluation(cwd, response.proMoment, { humanVisible: true });
527
+ return;
528
+ }
529
+ process.stdout.write(`${JSON.stringify(response, null, 2)}\n`);
530
+ recordProMomentEvaluation(cwd, response.proMoment, { humanVisible: false });
531
+ }
532
+ if (require.main === module) {
533
+ main();
534
+ }
535
+
536
+ module.exports = {
537
+ formatBoundedStatus,
538
+ buildStatusJson,
539
+ parseArgs,
540
+ };
@@ -0,0 +1,77 @@
1
+ "use strict";
2
+
3
+ const { readStdinJson, ensureCcoDirs, safeWriteJson } = require("./lib/fsx");
4
+ const { normalizeHookInput } = require("./lib/hook-contracts");
5
+ const { logMetric } = require("./lib/metrics");
6
+ const { createCanonicalProof, createTaskContractProof, withCanonicalProof } = require("./lib/proof-canonical");
7
+
8
+ function buildSafeStopMeta(input, outPath) {
9
+ return withCanonicalProof(
10
+ { outPath, reason: input.reason || "user-stop" },
11
+ createCanonicalProof("safe_stop", {
12
+ safe_stop_reason: input.reason || "user-stop",
13
+ progress_ref: outPath,
14
+ reentry_status: input.reentry_status || "reentry_available",
15
+ next_bounded_action: input.next_bounded_action || null,
16
+ rollback_available:
17
+ typeof input.rollback_available === "boolean"
18
+ ? input.rollback_available
19
+ : null,
20
+ claim_boundary: input.claim_boundary || null,
21
+ where_am_i_now: input.where_am_i_now || null,
22
+ progress_preserved: true,
23
+ reentry_anchor_saved: true,
24
+ evidence_refs: [outPath],
25
+ })
26
+ );
27
+ }
28
+
29
+ async function handleStop(rawInput) {
30
+ const input = normalizeHookInput(rawInput);
31
+ const cwd = input.cwd;
32
+ const sessionId = input.session_id;
33
+
34
+ ensureCcoDirs(cwd);
35
+ const taskContractProof = createTaskContractProof(input.task_contract);
36
+ if (taskContractProof) {
37
+ logMetric(cwd, {
38
+ sessionId,
39
+ event: "TaskContract",
40
+ action: "attached",
41
+ reasonCodes: [],
42
+ meta: withCanonicalProof(
43
+ { skipOutcomeEvent: true, taskId: input.task_id || null },
44
+ taskContractProof
45
+ ),
46
+ });
47
+ }
48
+ const outPath = `.claude/cco/state/stop-${Date.now()}.json`;
49
+ safeWriteJson(cwd, outPath, {
50
+ savedAt: new Date().toISOString(),
51
+ sessionId,
52
+ reason: input.reason || "user-stop",
53
+ message: input.message || "",
54
+ nextBoundedAction: input.next_bounded_action || null,
55
+ });
56
+
57
+ logMetric(cwd, {
58
+ sessionId,
59
+ event: "Stop",
60
+ action: "snapshot",
61
+ reasonCodes: ["STOP_SNAPSHOT"],
62
+ meta: buildSafeStopMeta(input, outPath),
63
+ });
64
+
65
+ return {};
66
+ }
67
+
68
+ async function main() {
69
+ const raw = await readStdinJson();
70
+ process.stdout.write(JSON.stringify(await handleStop(raw)));
71
+ }
72
+
73
+ main().catch(() => process.stdout.write(JSON.stringify({})));
74
+
75
+ module.exports = {
76
+ handleStop,
77
+ };